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System for the safe authentication and management of registered credit instruments or documents comprising: a personalized document 
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WO 97/15032 PCT/EP95/05015 

SYSTEM FOR THE SAFE AUTHENTICATION AND MANAGEMENT OF REGISTERED 
CREDIT INSTRUMENTS AND DOCUMENTS 

This invention relates to a system for the safe authentication 
and manaoement of registered credit instruments and documents. 
More particularly, this invention relates to a system suitable 
to identify with the utmost certainty the possessory title of a 
document- which is univocally associated to the legitimate holder 
on the basis of a personalized card. 

Besides, this invention relates to the apparatuses for issuing 
the oersonalized card and the document and for the validation of 
the latter, with the ascertainment of its authenticity on its 
u fci 1 i za tion . 

Concerina registered documents, special reference is made to a 
specific credit instrument utilizable for commercial transac- 
tions which are executed with the utmost security, as the possi- 
bility of an illicit use of said instrument by third parties - 
due to loss or stealing - is excluded. 

Anyhow, th?? same system of authentication and management may be 
utilized for any other credit instruments, such as cheques, 
share certificates, certificates of indebtedness, savings books 
and the like, as well as personal documents or personal identi- 
fication documents, of the kind, for instance, of credit cards, 
passports, identity cards and driving licences. 

Several methods are known for the execution of the commercial 
transactions that involve the transfer of money between persons. 
Many transactions take place without any material transfer of 
currenr:v. for instance through a bank which sees directly, upon 
request by the concerned person, to crediting the indicated 
person with a given sum. 

In other cases, the payment is through credit instruments, for 
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instance bank cheques or bank drafts, relatively to which spe- 
cial cautions are adopted, to try to avoid their forgery or 
stealinq and their illicit utilization. 

Another form of payment is based on the use of credit cards, 
which authorize the holder to purchase goods or services with 
third oarties having an arranaement with the issuer of said 
cards, to which the charge of the payment is transferred. 
But also this form of payment is not free from risks, as the 
credit card may get lost or be stealed and unlawfully utilized, 
even though temporarily, by non authorized third parties. 
The aforementioned payment forms, widely a«looted, allow to limit 
the supply of cash, which however is still the more practical 
and direct and sometimes compulsory system to execute commercial 
transactions whose amount is not alwavc- ^mall. Obviously the 
possession of cash gives rise to fairly serious security pro- 
blems: in fact, stealed or lost currency c:.?n be easily used by 
anyone. Generally without, problems, as n<*M even the guarantees 
exist that safeguard somehow or other th? circulation of cheques 
and credi t cards . 

With an earlier . oatent application, the same applicant has 
intended to protect a system for commercial transactions suita- 
ble to obviate the aforementioned drawback?., providing for the 
use of a personalized card integrating a microprocessor wherein 
a personal cod? and information are stored deriving from the 
application of a mathematical expression to the parameters 
referred to the fingerprint of at least a finger of the holder 
of the same card: based on such document, a credit instrument is 
issued, which can be associated only to the holder, and which 
may be, by way of example, a cheque for a given sum, validable 
with businesses that have stipulated an agreement with the 
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issuer, on the conclusion of the commercial transaction. Thanks 
to the provision of the personal code and especially the tran- 
scodino of the fingerprint integrated in the card, said credit 
instrument provides guarantees of utmost security, as it cannot 
be utilized by a person other than the holder, and also the 
person who receives the payment has the utmost guarantees, as 
there is the certainty of the authenticity of the the instru- 
ment, substantially assimilable to cash. 

It ha~ been stressed that this system is susceptible of modifi- 
cations which can furtherly improve its already high level of 
cilobal security, allowing at the same time to create simple 
apparatuses for the validation of ths credit instrument or 
securities whose circulation is limited, by way of example, 
within the frame of this invention, to banks. 

Obiect of this invention is therefore to provide a system for 
the authentication and management of registered credit instru- 
ments and documents, such as to provide the utmost, security 
guarantees, causing them to be utilirable only by the holder to 
whoiT! th^v have been leqi tima tel y issued. 

A further object of this invention is to provide said credit 
instruments associated to the economic transaction or said 
reciir.t.»red documents or identity documents with a security print 
indisroiubly associated to the pacer support forming said inst- 
rument or document. 

A further object of this invention is to realize simple appara- 
tuses for carrying out the different stages of the system which 
allows to implement the above defined system. 

These and still further objects are reached by the system for 
the safe authe t ica t ion and management of registered credit 
instruments and documents subject matter of this invention. 
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compr isi ng : 

- a personalized document incorporating a microprocessor suita- 
ble to store a personal identification code of the holder and a 
numeric information associated to biometric characteristics of 
the same holder; 

- first means for releasing said personalized document to the 
holder; 

- second means for issuing registered credit instruments or 
documents; and 

- third means to validate the use of the instruments or docu- 
ments, all of said means being associated to an information 

svstem vtd provided with .? device allowing to acquire at least a 
biometric characteristic of the holder; 

said issued instruments and documents comprising at least a 
security code uni vocally generated by utilizing the personal 
identification code as a cryptographic , key ; 

said information being associated to a mathematical expression 
of thp -lata concerning the fingerprint of at least one live 
finger of the holder of said personalized instrument or docu- 
ment : 

the recoanition of the holder, both for the issue of the instru- 
ment or document and for the related validation, being obtained 
bv comparing the information got through the direct reading of 
the live finger of the holder and the application of the mathe- 
matical expression with the information stored in the personali- 
zed documents. 

The characteristics of the system for the safe authentication 
and management of registered credit instruments and documents 
subject matter of this invention will be better understood from 
the following description, wherein reference is made to the 
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attached drawings which show schematically a preferred non 
limitative embodiment of the same system, referred by way of 
example to a credit instrument, and wherein: 

Fiq. 1 shows the block diagram of the issue stage of the perso- 
nalized card: 

Fig. ? shows the block diagram of the issue stage of the credit 
instrument, based on said personalized card; 

Fia. 3 shows the block diagram of the validation stage of the 
credit instrument associated to the personalized card. 
With reference to the aforementioned figures, the system for the 
safe authentication and management of registered credit instru- 
mentT. and documents subject matter of this invention comprises 
basically a personalized document 10 and a paper support forming 
the credit instrument 12. The personalized document or smart- 
card 10, formed, by way of example, by a card having dimensions 
similar to those of the conventional credit cards, incorporates 
a mirrooroce«i5or wherein there are stored a person.?,] identificat- 
ion c^a*- rip ^nd a mathematical expression associated to at 
least one fincierorint of the person who requires of the issuing 
institution, for instance a bank, said card 10, to utilize the 
system subject matter of this invention referred to a credit 
instrument to perform commercial transactions. The personal 
identification code CIP, for instance in the form of an alphanu- 
merical sequence univocally associated to each holder, is gene- 
rated by the information system of the issuer SI and sent to the 
apparatus for the personalization of card 10, of which more will 
be said in the following. The mathematical excression stored in 
the microprocessor of card 10 is advantageously formed by an 
algorithm of the DES type (Data Encryption Standard), which 
allows to transcode the parameters associated to the fingerprint 
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of one or more fingers of the applicant, forming therefore a 
unique feature of the same. 

In the microprocessor of card 10 there are also stored, accor- 
dina to a preferred non critical embodiment, particulars and tax 
number of the applicant, as well as the current account number, 
complete with the bank co-ordinates, for the domiciliation of 
the credit instruments to be issued and negotiated. 
The credit instrument 12, which is the ma^ns for the execution 
of the economic transaction through the svstem subject matter of 
this invention, is formed by a support, preferably from paper, 
whose scheme is shown in Figs. 2 and 3. -h-o^d, by way of exam- 
ple, like bank cheques or drafts; anyhow, said support may also 
b« of diffent size, as the system of thic invention concerns in 
general all of the credit instruments, .:;S for instance savings 
books, share and deposit certificates, besides the mentioned 
personal documents or personal identification documents. Accor- 
dino to ,i preferred embodiment, said support has the configura- 
tion of a conventional cheque, for inr.r.-^cc from watermarked 
paper, which is authenticated on the basis of the data previou- 
sly stored in the microprocessor of card 10. In particular, 
throucih an apoaratus of which more will be said in the follo- 
wing, a dot coding (not inter pretabl e at. siaht.) is provided, 
alona a prefixed field, on the paper support forming the credit 
instrument 12, which coding defines, for inst.ance, the issuing 
d*te. the code of the issuing institution and the amount of said 
instrument. The same data are also formed along a distinct 
field, expressed in cryptographic form through a key made up by 
the aforementioned personal identification code stored in card 
10. 

Accordino to a further characteristic of the invention, the 
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suoDorf. forming the credit instrument or security 12 is provided 
with a security print 14, of any shape and size, made up by two 
or more zones with different light reflection: said zones are 
formed bv an alternation of embossed and hollow sectors, circum- 
scribed by approached lines differently oriented by groups 
relatively to one another. Impression 14 as a whole is obtained 
in reflecting or metallic ink, through offset and dry copper- 
olate printing processes. The characteristics of the mentioned 
security print with which the support forming the credit inst- 
rument 12 is advantageously provided are not described in de- 
tail, being the subject matter of an autonomous patent applica- 
tion reaistered in Italy by the same applicant. 

for t.ha i mol ementa ti on of the system of this invention, by way 
of exa.m^e and not critically referred to ?. credit instrument to 
carry n-a commercial transactions, specific apparatuses are 
supolia*!. some of which have already be^n mentioned: there are, 
in o&r r i ruUr , a firr.t apparatus allowina to issue the persona- 
lised document, in the following referred to as card, and a 
r.f?cori'1 apparatus which, against the recognition of the applicant 
throuoh the parameters stored in the microprocessor of said 
card, allows to issue the credit instrument and to authenticate 
it univocally. A third apparatus, described in detail later on, 
validates the instrument on its utilization, by means of a 
trianaulation. 

The first apparatus, shown as a scheme in Fig. 1, allows to 
realise the starting stage of the system of this invention, 
issuing the document or personalized card, 10. Said apparatus 
comprises a personal computer 16, connected to the information 
system SI of the issuing institution, for instance a bank, 
throuoh a communication line 18; the information system SI 
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checks, through the connection with the anagraphical file and 
current accounts file of the institution or body issuing card 
10, the existence of the corresponding data (particulars and 
proprietary title of the applicant) relative to the person 
reouirinq said card. The apparatus comprises also a 
reader /encoder 20 of card 10 to be personalized, 3n a biometric 
identity sensor 22. The reader/encoder 20, connected to the 
personal computer 16 and consequently to the information system 
S3, throunh line IB. receives from the latter the personal iden- 
tification code CIP; the biometric sensor 22, connected to or 
intecratsd in the reader-encoder 20, senses and transcodss the 
print or fingerprints of the applicant, who puts the finger or 
finger-; in sequence on a special seat 24 obtained on the same 
sensor 22. The latter is obviously orovided with one or more 
ooeninos (not shown) for the introduction and coming out of card 
10 to be personalized. 

The aprv.ratus schematically shown in Fia. 2. which realizes the 
second stage of the system subisc: matter of this invention 
issMir..-. the credit, instrument 12 based on the data of c~.rd 10, 
is substantially formed by the same components as the preceding 
anoanru?, with the addition of a printer. In detail, said 
•DDarAtus comprises a personal computer 26 connected to the 
information system SI of the issuing institution through a 
communication line 28 and a software programme SW3 , a reader 30 
of th* personalized smart-card 10, an identity reader or biome- 
tric '.^nsor 32 having a seat 34 where the applicant puts the 
finger or fingers, and a printer 36, preferably an ink jet 
printer with graphic printing modalities. Said printer prints in 
crvptograohied form, on the paper support forming the credit 
instrument 12 which is inserted in it, a security code formed on 



SUBSTITUTE SHEET (RULE 26) 



WO 97/15032 g PCT/EP95/0S015 

the basis of the data existing on card 10, authenticating said 

instrument. Printer 36 is provided with a conventional 
openinq(s) (not shown) for the introduction and coming out of 
the c^dit instrument 12 to be authenticated. 

For ths implementation of the system subject matter of this 
invention a third apparatus is provided, schematically shown in 
Fig. 3, analogous to the preceding one and provided with further 
functions, being utilized in the last stage on the utilization 
and validation of the credit instrument 1?. Said apparatus 
comprises a personal computer 40 connected to the information 
svstcfl SI of the issuina institution through a communication 
line in *.nd a software programme 5WC , a reader 44 of smart-card 
1.0. a biometrie identity sensor with a seat 50 where the appli- 
cant out the finger or fingers, and a printer 48. The latter is 
provided with a device which provides to the possible invalida- 
tion of the negotiated instrument 12. 

The biomstric sensor, comprised in all the above described 
a on* r^tuses , is substantially made ud by terminal controlled 
bv an built-in microprocessor soecic 1 i zed for the check of the 
identify based on the biometricdl data of the fingers and the 
technology of the card. 8oth the- built-in application and the 
data reside in an internal RAM permanently fed by a lithium 
battery: the security is ensured by a built-in microprocessor 
and bv a built-in tamper proof security microprocessor, with 
src ret** keys . independent and unalterable, for the DES crypto- 
graphy, permanently fed by the lithium battery. 

The system for the safe authentication and management of regi- 
stered credit instruments and documents subject matter of this 
invention is articulated, as concerns the development of the 
operations, according to the following modalities. 
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Distinction is made, as specified above, between three different 

operating stages: 

- issuina of the personalized smart-card 10: 

- issuinq of the instrument or security 12 with security apposi- 
tion : 

- treatment of instrument 12 with authentication of the holder. 
The first stage is associated with the issue of card 10, which 
has preferably a temporary validity; through the apparatus 
schematically shown in Fig. 1. card 1.0 *o be personalized is 
introduced, through a special slit 'not shown), in the 
reader /encoder 20. Now, the connection i; iti.nde with the informa- 
tion s\"?.tam SI of the issuino institution rnrough the communica- 
tion line 18, to record the issuing operation of card 10 and to 
receive from the same system thr personal identification code 
OTP of the client. Said code is stored in the mic roorcezso r of 
card 10 hv the reader -encoder 20 in a protected manner, prefera- 
bly in the form of an alphanumer ical seair-'Ct-. At the same time, 
th* ar>r«i . icant put* the fSnoer on se::r 21 f ,: the biometric sensor 
22: the print, or possibly several prints, corresponding to as 
many finaars, are stored in the microprocessor of card 10 in 
transcoded and protected form with the oerson:-l identification 
code CIP. During this stage, performed by the biometric sensor 
22, further indications are preferably stored in card 10, such 
as, for instance, the expiry date, of th? same card and the 
particulars of the client or other data. 

Following this operation, C3rd 10 is univocally personalized and 
allows to start the second stage which, through the apparatus 
schematically shown in Fig. 2. causes the issuing of the credit 
instrument or document 12, introduced in printer 36. The mentio- 
ned security print 14 in metallic or reflecting ink is already 
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present on the paper support forming said instrument. During 

this issuing stage, through printer 36 a security code is prin- 
ted, for instance of the known type PDF 417. subdivided into two 
parts t.h».t are not i nterpretable at sight: the first part of 
said cod*? includes all the data relating to the release of the 
instrument (for instance, data and place of issue, institution 
and branch, document number, etc.). while the second part of the 
code comprises the same data as the first one, expressed in 
cryptooraphied form by means of the key formed by the personal 
identification code CIP, which can be univocally associated as 
such to the person requiring the credit instrument 12. The 
applicant puts the finger in correspondence of seat 34 of th*r: 
biometri^ sensor 32 for the validation of his own print against 
tha one stored in protected form in card 10 and sensed by 
reader 10. Reader 30 autonomously provides to reading the data 
of card '0 through the mathematical expression or algorithm and 
rh* pcrnr»nal identification code CIP of the applicant: such code 
i* therefore utilized as a cryptographic kev to oenerate th*> 
sec.in code which printer 36 prints on the paper support 
forming the credit instrument or security or document 12. Also 
in thi-r case, the details of the transaction are recorded 
through the communication line 20 in the information system SI 
of the issuing institution. 

Now the applicant has a univocally personalized credit instru- 
ment 12, which he can use in case of need giving his card, also 
personalized, to the personnel who performs the treatment and 
authentication of the same instrument through the third appara- 
tus schematically shown in Fig. 3. 

Supposing that the system subject matter of this invention be 
limited to the credit institutions where the two first apparatu- 
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ses are installed, also the third apparatus will be installed in 
the same institutions or with a branch. The owner of the perso- 
nalized instrument 12 introduces preliminarily in reader 44 of 
said apparatus his card 10 and at the same time or immediately 
after, outs his finger on seat 50 of the biometric sensor 46, 
for the validation of his print against the one stored in pro- 
tected form in the microprocessor of the same card. In case of 
positive recognition, reader 44 reads on card 10 the personal 
identification code CIP of the owner of instrument 12, which is 
adopted as a key to check the consistency between the two parts 
of th* security code, utilizing the same mathematical expression 
of cr 'nlroaraphv used on the issue of said instrument. The pori 
tivr; rrrnanition, based on the univocal aspect of the finger- 
prinr. with the contextual activation of the other two elements, 
confirm, the validity of document 12, exludinq any illicit 
utilization of the same. Now printer 48 can provide to the: 
invalidation of instrument 12, while "the personnel of the branch 
assi-nr.r. the sum of monav cor respond inc. to the -value of said 
instruii?nh or validates the authentication of the person. The 
invalidation stage of the credit instrument is made by printing 
on r.h" Tv?.r»er support forming the same instrument a writing, for 
instancr "negotiated" or "paid" through said printer 43, Through 
the ro^munication line 42. connected to the information system 
SI, also this ending stage of the transaction is recorded. 
One shntiid anticipate that the operations concerning the issue 
stao* of card 10 with the intervention of the first apparatus 
mav rr/,r,rise also the issue of a further card for a co-holder 
whose particulars are obtained with the same modalities descri- 
bed above. One should also anticipate that the same apparatus 
issuing the card may provide also to the renewal of the same. 
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with the updating of the particulars on the client and/or the 
issue of a new personalized document. 

Av> can b:? understood from the above, the system' for the authen- 
t*. j M and manaaement of registered credit instruments and 
documents subiect matter of this invention provides guarantees 
of utmost security; in fact % the issued instruments can be 
exacted only bv the legitimate holder based on a precise and 
univocril check. 

Tha advantages of said system, which, as described above, may be 
adopted to prevent the risk connected to the circulation of any 
rMistPrpid credit instrument or document, are especially evident 
if said instrument attributes the holder the ready availability 
of a ajvfsn amount of money; in fact, the same holder can readily 
cash the corresponding sum with any body having entered an 
aoreem^nt. with thr: issuer, di spot, i na th^r^fore of cash in hand, 
without running anv risk. 

Fv-.-n u : ths unlikelv hypothesis of contemporaneous loss or 
r.t.cc^ in*' of the personalized credit instrument and the card, the; 
mnnfjv -\nno' he cashed bv third parties a*.-, on t hr^ check made 
before paying, -there would be no correspondence between the 
fingerprint of the holder and the one stored in the card micro- 
processor . 

Anyhow, the invention, as described hereabove and claimed he- 
reafter, has been proposed by way of example, bei nc> obvious that 
the same may be susceptible of many changes and variants, all of 
them falling however withing the invention concept. 
For instance, the? apparatus for the issue of the registered 
credit instrument or document and the apparatus for the related 
validation, and possibly also the first apparatus providing to 
issuina the personal i zed card, might be incorporated in only 
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apparatus; in the same way, the card re3der and the biometric 
sensor comprised in the second and the third apparatus might be 
incorporated in one only station. 

Lastly, while th?. system has been proposed by way of example for 
a realization within the bank ciruit, further possibilities are 
not to be excluded in this regard: in fact, the basic need of 
havini several places available for the- fruition of the system 
may bs satisfied by different bodies, for instance Post Offices, 
Communes or local administrations in gene***!. 
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CLAIMS 

1. A system for the safe authentication and management of regi- 
stered credit instruments and documents, comprising: 

- a personalized document (10) incorporating a microprocessor 
suitable to store a personal identification code CIP of the 
holder and a numeric information associated to biometric charac- 
teristics of the same holder; 

- first means for issuing said personalized document (10) to the 
holder; 

- second means for issuing registered credit instruments (12) or 
documents: and 

- third mean- for validating the use of the registered instru- 
ments (12) or documents, all of said means being either associa- 
ted or not associated to an information system SI and provided 
with a device for acquiring at least one biometric characteri- 
stic of the holder; 

said registered instruments (12) or documents issued comprising 
at le.v-1: * security code univocally generated utilizing the 
personal identification code CIP as a cryptographic key; 
said information being associated to a mathematical expression 
or aloorithm of the data related to the fingerprint of at least 
a live finger of the holder of said personalized document (10); 
the recoanition of the holder, both for the issue of the regi- 
stered instrument or document and for the related validation, 
beino obtained by comparing the information got through the 
direct reading of the finger of the holder and the application 
of the mathematical expression with the one stored in the perso- 
nalized document (10). 

2. The system according to claim 1, characterized in that said 
mathematical expression is formed by an algorithm of the DES 
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type . 

3. The svstem according to claims 1 and 2. characterized in that 
said rfi*??.ns for the release of the personalized document (10) 
comprise a oersonal computer (16) connected to a reader /encode r 
(20) for storing in protected form in the microprocessor of the 
document (10) said personal identification code CIP of the 
holder suoplied by the information system SI of the issuing 
institution through a communication lino (18), and a biometric 
sensor (7? ) for storing in transcoded form in the same micropro- 
cessor, to form said numeric information or algorith, at least a 
finoor^rint of the holder, who puts the finger in correspondence 
of a sr?.t (24) of said sensor. 

4. Thn *vstam according to claims 1 and 2. characterized in that 
said moans for issuing credit instruments or documents (12) 
comoM 3* a oersonal computer (26) connected to the information 
svstPtm of the issuing institution through a communication line 
(?£). .» reader (30) of th* personalized document (10). a biome- 
trie rn-v-.nr (Z?) and a orinter (36) provided with graphic moda- 
lity rr- printing on said credit instruments '(12) a security 
cods not interpretable at sight, generated by said personal 
identification code CIP, utilized as a cryptographic key and 
sensed >v sensor (32) in case of positive recognition following 
the comDarison between the fingerprint of the holder , who puts 
the live finger on a seat (34) of said sensor, and the one 
star?* in protected form, forming the numeric information, in 
the microprcessor of the document (10). 

5. The- system according to one or more of the preceding claims, 
characterized in that said means for validating the use of the 
credit instruments or documents (12) comprise a personal compu- 
ter (40) connected to the information system SI of the issuing 
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institution through a communication line (42), a reader of the 
personalized document (10), a biometric sensor (46) and a prin- 
ter (48) provided with graphic modality for invalidating said 
credit instruments (12) in case of positive recognition follo- 
wing tha comparison between the print of the holder, who puts 
the live finqer on a seat (50) of the same sensor, and the one 
stored in protected form, forming the numeric information, in 
the microprocessor of the document (10). 

6. ThR system according to one or more of the preceding claims, 
characterized in that said credit instruments or documents (12) 
*> rr » w*r> ud by a oapsr support on which there is obtained a 
security print (14) in reflecting or metallic ink, having two or 
more -ones with different light reflection, said zones being 
formed by alternating embossed or hollow sectors, circumscribed 
bv aorroached lines differently oriented by groups relatively to 
one another. 

7. Tho svstem according to one or more of th2 preceding claims, 
characterized in that said means for the release of the persona- 
lize*! document MO), th.r* issus of registered credit instruments 
or documents (12) and the validation to the use of the same 
reaistared instruments or documents are independent on or inte- 
grated in one or more aooaratuses. 

8. T system according to one or more of the preceding claims, 
characterized in that said means for the release of the persona- 
lized document (10), the issue of registered credit instruments 
or documents (12) and the validation of the same registered 
credit instruments or documents are combined with one another 
depending on the card (10), the same registered credit instru- 
ments or documents (12) and/or the related paper support- 
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